#Ransomware

2026-08-10

USCISA

#StopRansomware: Gunra Ransomware

#Gunra #Ransomware #T1190 #T1003 #T1003.003 #T1021.001 #T1021.002 #T1040 #T1047 #T1070.003 #T1078.002 #T1083 #T1098 #T1105 #T1106 #T1114 #T1133 #T1486 #T1490 #T1530 #T1539 #T1550.002 #T1555 #T1560 #T1567 #T1572 #T1622 #T1657 #T1678

2026-07-30

Ahnlab

Operation Double Barrel (국가배후 해킹조직과 Gunra 랜섬웨어 그룹의 관계)

#Gunra #Ransomware #Copperhedge #Wateringhole #Phishing #DoubleBarrel #SIGNBT #Whitepaper

2026-07-30

Ahnlab

Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)

#Gunra #Ransomware #Copperhedge #Wateringhole #DoubleBarrel #Phishing #SIGNBT

2026-06-02

Ahnlab

새벽에 온 암호화 손님 Endpoint(Midnight) 랜섬웨어 분석

#Endpoint #Midnight #Ransomware #T1486 #T1490 #T1489 #Suspicious

2026-05-20

Ahnlab

Crypto Guest at Dawn Endpoint (Midnight) ransomware analysis

#Endpoint #Midnight #Ransomware #T1486 #T1490 #T1489 #Suspicious

2026-04-16

KRNPA

국내 중소기업 대상 신규 랜섬웨어(Midnight, Endpoint) 감염 확산에 따른 보안 권고문 배포

#Endpoint #Midnight #Ransomware #Manufacturing

2026-04-16

KRCERT

국내 중소기업 대상 신규 랜섬웨어 범죄 확산에 따른 보안 권고문

#Midnight #Endpoint #Ransomware #Phishing

2026-03-17

Break Glass Intelligence

When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader

#Lazarus #Medusa #Ransomware #T1574.002 #T1562.001 #T1059.001 #T1490 #T1555 #T1486 #T1547.014 #T1129 #T1036.005 #T1622 #T1135 #T1027.002 #T1546.015 #T1489 #T1082

2026-03-12

Break Glass Intelligence

Gunra Ransomware's Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying

#Gunra #T1491.001 #T1082 #T1083 #T1070.002 #T1486 #T1548 #T1027 #T1059.004 #T1053.003 #T1556.003 #T1037 #Ransomware #YARA

2026-03-12

Break Glass Intelligence

Lazarus Group Caught Running Medusa Ransomware: XOR-Decoded Config Exposes Tor C2, IME-Based Loader, and a 7-Month Intrusion Timeline

#Lazarus #Medusa #Ransomware #T1574.002 #T1562.001 #T1059.001 #T1490 #T1555 #T1486 #T1547.014 #T1129 #T1036.005 #T1622 #T1135 #T1027.002 #T1546.015 #T1489 #T1082

2026-02-11

Cloud SEK

Inside Gunra RaaS: From Affiliate Recruitment on the Dark Web to Full Technical Dissection of their Locker

#Gunra #Ransomware

2025-11-24

Bitdefender

The Korean Leaks – Analyzing the Hybrid Geopolitical Campaign Targeting South Korean Financial Services With Qilin RaaS

#MoonstoneSleet #Ransomware

2025-10-29

Ahnlab

Gunra 랜섬웨어

#Gunra #Ransomware #Endpoint

2025-10-22

Ahnlab

취약한 난수 생성 함수를 사용하는 Gunra 랜섬웨어 분석 (리눅스 환경 대상 유포, ELF 형태)

#Gunra #Ransomware #T1486

2025-09-23

Rakesh Krish

GUNRA RANSOMWARE: What You Don’t Know!

#Gunra #Ransomware #Phishing

#Ransomware

General

Tagged Reports

#StopRansomware: Gunra Ransomware

Operation Double Barrel (국가배후 해킹조직과 Gunra 랜섬웨어 그룹의 관계)

Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)

새벽에 온 암호화 손님 Endpoint(Midnight) 랜섬웨어 분석

Crypto Guest at Dawn Endpoint (Midnight) ransomware analysis

국내 중소기업 대상 신규 랜섬웨어(Midnight, Endpoint) 감염 확산에 따른 보안 권고문 배포

국내 중소기업 대상 신규 랜섬웨어 범죄 확산에 따른 보안 권고문

When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader

Gunra Ransomware's Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying

Lazarus Group Caught Running Medusa Ransomware: XOR-Decoded Config Exposes Tor C2, IME-Based Loader, and a 7-Month Intrusion Timeline

Inside Gunra RaaS: From Affiliate Recruitment on the Dark Web to Full Technical Dissection of their Locker

The Korean Leaks – Analyzing the Hybrid Geopolitical Campaign Targeting South Korean Financial Services With Qilin RaaS

Gunra 랜섬웨어

취약한 난수 생성 함수를 사용하는 Gunra 랜섬웨어 분석 (리눅스 환경 대상 유포, ELF 형태)

GUNRA RANSOMWARE: What You Don’t Know!